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Abstract 



PURPOSE:To surely realize security management among domains (network system) A, B, and C having 
different kinds of equipment in a system in open decentralized environment. 

CONSTITUTION:At an optional position in a network, a TTP (reliable 3rd party) for security management 
covering plural domains is provided, and a security policy setting and modifying means for tlie whole 
network NW1 and an access control decision means which controls and decide access covering plural 
domains according to the security policy are provided there. When there is requests to register security 
policies PA and PB from the domains A and B (managers MA and MB) (1), the TTB compares PA and 
PB from points of view of regulations of OSI such as certification, access control, and secrecy and 
absorbs differences in expression by mapping generate a security policy P which has no contradiction 
on the whole. On the basis of P, various security management such as access permission/inhibition 
decision making is performed. 
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